cycode 3.16.2.dev2__tar.gz → 3.16.3.dev2__tar.gz

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: cycode
-Version: 3.16.2.dev2
+Version: 3.16.3.dev2
 Summary: Boost security in your dev lifecycle via SAST, SCA, Secrets & IaC scanning.
 License-Expression: MIT
 License-File: LICENCE

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/cycode/__init__.py

@@ -5,4 +5,4 @@ import time as _time
 # end-to-end scan duration from the moment the user actually triggered it.
 _BOOT_WALL: float = _time.time()
 
-__version__ = '3.16.2.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag
+__version__ = '3.16.3.dev2'  # DON'T TOUCH. Placeholder. Will be filled automatically on poetry build from Git Tag

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/cycode/cli/apps/ai_guardrails/session_start_command.py

@@ -1,8 +1,5 @@
 """Handle AI guardrails session start: auth, conversation creation, session context."""
 
-import os
-import platform
-import socket
 import sys
 from typing import TYPE_CHECKING, Annotated, Optional
 
@@ -15,6 +12,13 @@ from cycode.cli.apps.auth.auth_common import get_authorization_info
 from cycode.cli.apps.auth.auth_manager import AuthManager
 from cycode.cli.exceptions.handle_auth_errors import handle_auth_exception
 from cycode.cli.utils.get_api_client import get_ai_security_manager_client
+from cycode.cli.utils.host_info import (
+    get_hostname,
+    get_last_login_user,
+    get_os_version,
+    get_platform_name,
+    get_serial_number,
+)
 from cycode.logger import get_logger
 
 if TYPE_CHECKING:
@@ -23,14 +27,6 @@ if TYPE_CHECKING:
 logger = get_logger('AI Guardrails')
 
 
-def _get_logged_in_user() -> Optional[str]:
-    """Best-effort OS account name (whoami). None if it can't be resolved."""
-    try:
-        return os.getlogin()
-    except Exception:
-        return None
-
-
 def _report_session_context(ai_client: 'AISecurityManagerClient', ide: IDE, user_email: Optional[str]) -> None:
     """Report IDE session context to the AI security manager. Never raises."""
     try:
@@ -38,9 +34,11 @@ def _report_session_context(ai_client: 'AISecurityManagerClient', ide: IDE, user
         if not global_config_file and not enabled_plugins:
             return
         ai_client.report_session_context(
-            hostname=socket.gethostname(),
-            platform=platform.system(),
-            logged_in_user=_get_logged_in_user(),
+            hostname=get_hostname(),
+            platform_name=get_platform_name(),
+            os_version=get_os_version(),
+            serial_number=get_serial_number(),
+            last_login_user=get_last_login_user(),
             global_config_file=global_config_file,
             enabled_plugins=enabled_plugins,
             user_email=user_email,

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/cycode/cli/apps/configure/configure_command.py

@@ -1,7 +1,12 @@
 from typing import Optional
 
 from cycode.cli.apps.configure.consts import CONFIGURATION_MANAGER, CREDENTIALS_MANAGER
-from cycode.cli.apps.configure.messages import get_credentials_update_result_message, get_urls_update_result_message
+from cycode.cli.apps.configure.messages import (
+    get_credentials_environment_variables_override_warning,
+    get_credentials_update_result_message,
+    get_urls_environment_variables_override_warning,
+    get_urls_update_result_message,
+)
 from cycode.cli.apps.configure.prompts import (
     get_api_url_input,
     get_app_url_input,
@@ -73,3 +78,14 @@ def configure_command() -> None:
         console.print(get_urls_update_result_message())
     if credentials_updated or oidc_credentials_updated:
         console.print(get_credentials_update_result_message())
+
+    # Warn about environment variables that override the configured file values, regardless of whether anything was
+    # updated. The env vars take precedence on every subsequent call, so configuring the file alone has no effect while
+    # they are set.
+    urls_override_warning = get_urls_environment_variables_override_warning()
+    if urls_override_warning:
+        console.print(f'[yellow]Warning:[/] {urls_override_warning}')
+
+    credentials_override_warning = get_credentials_environment_variables_override_warning()
+    if credentials_override_warning:
+        console.print(f'[yellow]Warning:[/] {credentials_override_warning}')

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/cycode/cli/apps/configure/messages.py

@@ -1,3 +1,5 @@
+from typing import Optional
+
 from cycode.cli.apps.configure.consts import (
     CONFIGURATION_MANAGER,
     CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE,
@@ -14,11 +16,14 @@ def _are_credentials_exist_in_environment_variables() -> bool:
 
 
 def get_credentials_update_result_message() -> str:
-    success_message = CREDENTIALS_UPDATED_SUCCESSFULLY_MESSAGE.format(filename=CREDENTIALS_MANAGER.get_filename())
+    return CREDENTIALS_UPDATED_SUCCESSFULLY_MESSAGE.format(filename=CREDENTIALS_MANAGER.get_filename())
+
+
+def get_credentials_environment_variables_override_warning() -> Optional[str]:
     if _are_credentials_exist_in_environment_variables():
-        return f'{success_message}. {CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE}'
+        return CREDENTIALS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE
 
-    return success_message
+    return None
 
 
 def _are_urls_exist_in_environment_variables() -> bool:
@@ -28,10 +33,13 @@ def _are_urls_exist_in_environment_variables() -> bool:
 
 
 def get_urls_update_result_message() -> str:
-    success_message = URLS_UPDATED_SUCCESSFULLY_MESSAGE.format(
+    return URLS_UPDATED_SUCCESSFULLY_MESSAGE.format(
         filename=CONFIGURATION_MANAGER.global_config_file_manager.get_filename()
     )
+
+
+def get_urls_environment_variables_override_warning() -> Optional[str]:
     if _are_urls_exist_in_environment_variables():
-        return f'{success_message}. {URLS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE}'
+        return URLS_ARE_SET_IN_ENVIRONMENT_VARIABLES_MESSAGE
 
-    return success_message
+    return None

cycode-3.16.3.dev2/cycode/cli/utils/host_info.py

@@ -0,0 +1,127 @@
+import getpass
+import platform
+import re
+import socket
+import subprocess
+from typing import Optional
+
+from cycode.logger import get_logger
+
+logger = get_logger('HOST INFO')
+
+_SUBPROCESS_TIMEOUT_SEC = 5
+
+_PLATFORM_NAMES = {'Darwin': 'macOS', 'Windows': 'Windows', 'Linux': 'Linux'}
+
+
+def _run(command: list, timeout: int = _SUBPROCESS_TIMEOUT_SEC) -> Optional[str]:
+    """Run a command and return its stripped stdout. Never raises; returns None on any error."""
+    try:
+        result = subprocess.run(command, capture_output=True, text=True, timeout=timeout)  # noqa: S603
+        return result.stdout.strip() or None
+    except Exception as e:
+        logger.debug('Failed to run command %s', command, exc_info=e)
+        return None
+
+
+def _read_text_file(path: str) -> Optional[str]:
+    """Read and strip a text file. Never raises; returns None if it can't be read."""
+    try:
+        with open(path) as text_file:
+            return text_file.read().strip() or None
+    except OSError:
+        return None
+
+
+def get_hostname() -> Optional[str]:
+    try:
+        return socket.gethostname() or None
+    except Exception as e:
+        logger.debug('Failed to resolve hostname', exc_info=e)
+        return None
+
+
+def get_platform_name() -> Optional[str]:
+    try:
+        system = platform.system()
+        return _PLATFORM_NAMES.get(system, system or None)
+    except Exception as e:
+        logger.debug('Failed to resolve platform name', exc_info=e)
+        return None
+
+
+def get_os_version() -> Optional[str]:
+    try:
+        system = platform.system()
+        if system == 'Darwin':
+            return platform.mac_ver()[0] or None
+        if system == 'Windows':
+            return platform.win32_ver()[1] or platform.version() or None
+        if system == 'Linux':
+            return _get_linux_os_version()
+        return platform.release() or None
+    except Exception as e:
+        logger.debug('Failed to resolve OS version', exc_info=e)
+        return None
+
+
+def _get_linux_os_version() -> Optional[str]:
+    freedesktop_os_release = getattr(platform, 'freedesktop_os_release', None)  # Python 3.10+
+    if freedesktop_os_release is not None:
+        try:
+            version_id = freedesktop_os_release().get('VERSION_ID')
+            if version_id:
+                return version_id
+        except OSError:
+            pass
+
+    os_release = _read_text_file('/etc/os-release')  # Python 3.9 fallback: parse manually
+    if os_release:
+        for line in os_release.splitlines():
+            if line.startswith('VERSION_ID='):
+                return line.split('=', 1)[1].strip().strip('"') or None
+
+    return platform.release() or None
+
+
+def get_last_login_user() -> Optional[str]:
+    try:
+        return getpass.getuser() or None
+    except Exception as e:
+        logger.debug('Failed to resolve last login user', exc_info=e)
+        return None
+
+
+def get_serial_number() -> Optional[str]:
+    try:
+        system = platform.system()
+        if system == 'Darwin':
+            return _get_macos_serial_number()
+        if system == 'Windows':
+            return _get_windows_serial_number()
+    except Exception as e:
+        logger.debug('Failed to resolve serial number', exc_info=e)
+    return None
+
+
+def _get_macos_serial_number() -> Optional[str]:
+    output = _run(['ioreg', '-c', 'IOPlatformExpertDevice', '-d', '2'])
+    if not output:
+        return None
+    match = re.search(r'"IOPlatformSerialNumber"\s*=\s*"([^"]+)"', output)
+    return match.group(1) if match else None
+
+
+def _get_windows_serial_number() -> Optional[str]:
+    import pythoncom  # from pywin32
+    import win32com.client  # from pywin32
+
+    pythoncom.CoInitialize()
+    try:
+        wmi_service = win32com.client.GetObject('winmgmts:')
+        for bios in wmi_service.InstancesOf('Win32_BIOS'):
+            serial = bios.SerialNumber
+            return serial.strip() if serial else None
+    finally:
+        pythoncom.CoUninitialize()
+    return None

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/cycode/cyclient/ai_security_manager_client.py

@@ -94,8 +94,10 @@ class AISecurityManagerClient:
     def report_session_context(
         self,
         hostname: Optional[str] = None,
-        platform: Optional[str] = None,
-        logged_in_user: Optional[str] = None,
+        platform_name: Optional[str] = None,
+        os_version: Optional[str] = None,
+        serial_number: Optional[str] = None,
+        last_login_user: Optional[str] = None,
         global_config_file: Optional[dict] = None,
         enabled_plugins: Optional[dict] = None,
         user_email: Optional[str] = None,
@@ -103,8 +105,10 @@ class AISecurityManagerClient:
         """Report session context to the backend."""
         body: dict = {
             'hostname': hostname,
-            'platform': platform,
-            'logged_in_user': logged_in_user,
+            'platform_name': platform_name,
+            'os_version': os_version,
+            'serial_number': serial_number,
+            'last_login_user': last_login_user,
             'user_email': user_email,
             'global_config_file': global_config_file,
             'enabled_plugins': enabled_plugins,

{cycode-3.16.2.dev2 → cycode-3.16.3.dev2}/pyproject.toml

@@ -21,7 +21,7 @@ classifiers = [
     "Programming Language :: Python :: 3.14",
 ]
 dynamic = ["dependencies"]
-version = "3.16.2.dev2"
+version = "3.16.3.dev2"
 
 [project.scripts]
 cycode = "cycode.cli.app:app"